PT-2018-4595 · Ibm · Ibm Financial Transaction Manager (Ftm) For Ach Services+1

Publicado 2018-03-09 · Atualizado 2018-03-26 · CVE-2016-0268

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013

Description The issue allows remote authenticated users to obtain sensitive information via crafted XML data, exploiting an XML external entity (XXE) vulnerability.

Recommendations For IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later. For IBM Financial Transaction Manager (FTM) for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later. For IBM Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013, update to a version that includes fp0013 or later.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2016-0268

Produtos afetados

Ibm Financial Transaction Manager (Ftm) For Ach Services

Ibm Financial Transaction Manager (Ftm) For Corporate Payment Services

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-0268 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0268 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21977245 · Aviso do Fabricante